Re: problems about dependency of mysql-server-5.5-dbgsym

2015-09-15 Thread Robie Basak
On Tue, Sep 15, 2015 at 11:51:11AM +0800, Gareth wrote: > the same package from different (but related) repo has different > dependencies. One is '(= 5.5.35+dfsg-1ubuntu1)' and another is '(= > 5.5.44-0ubuntu0.14.04.1)'. The first on from trusty and breaks in > installation if I don't set ddebs' tr

Re: problems about dependency of mysql-server-5.5-dbgsym

2015-09-15 Thread Gareth
On Tue, Sep 15, 2015 at 4:59 PM, Robie Basak wrote: > On Tue, Sep 15, 2015 at 11:51:11AM +0800, Gareth wrote: >> the same package from different (but related) repo has different >> dependencies. One is '(= 5.5.35+dfsg-1ubuntu1)' and another is '(= >> 5.5.44-0ubuntu0.14.04.1)'. The first on from tr

[packages] python 2.7 and systemtap markers?

2015-09-15 Thread Gareth
Hey guys Are python2.7 binaries from official packages compiled with systemtap markers? -- Gareth Cloud Computing, OpenStack, Distributed Storage, Fitness, Basketball OpenStack contributor, kun_huang@freenode My promise: if you find any spelling or grammar mistakes in my email from Mar 1 2013,

Re: GRSecurity Closes Stable Patch of Linux Kernel, Your opinion?

2015-09-15 Thread Ralf Mardorf
Hi, there were already discussions about violations of the GPL on Linux audio lists, but I have forgotten if it's allowed to provide the source to customers only. IMO it doesn't matter what's allowed and what isn't allowed, there's an ethical commitment to keep source code open. Another issue is t

Re: Getting ubuntu iso securely

2015-09-15 Thread Ralf Mardorf
On Mon, 14 Sep 2015 15:07:02 -0700, Ryein Goddard wrote: >On Mon, Sep 14, 2015 at 10:32 AM, Ralf Mardorf wrote: >> On Mon, 14 Sep 2015 16:19:36 + (UTC), rajeev bhatta wrote: >> >It is not time consuming.. just for the user experience.. >> >> IMHO for averaged users it is time consuming. Even a

Re: problems about dependency of mysql-server-5.5-dbgsym

2015-09-15 Thread Colin Watson
On Tue, Sep 15, 2015 at 05:11:01PM +0800, Gareth wrote: > I know this. But at the first time I enabled ddebs' trusty only (no > trusty-updates yet), I got errors from running apt-get install this > package. Because the mysql-server's latest version is > 5.5.44-0ubuntu0.14.04.1, and the dbgsym packa

Re: problems about dependency of mysql-server-5.5-dbgsym

2015-09-15 Thread Gareth
Thanks Colin :) I have a better understanding for 'updates' repo now :) On Tue, Sep 15, 2015 at 8:37 PM, Colin Watson wrote: > On Tue, Sep 15, 2015 at 05:11:01PM +0800, Gareth wrote: >> I know this. But at the first time I enabled ddebs' trusty only (no >> trusty-updates yet), I got errors from

Fwd: user space probe in ubuntu 14.04

2015-09-15 Thread Gareth
Hi Ubuntu Guys I'm systemtap users on ubuntu. Here is an issue about mysql dbgsym package. Below are some details ps: http://paste.openstack.org/show/462299/ some bash history http://paste.openstack.org/show/462471/ the packages I have installed -- Forwarded message -- From: Fra

Re: Fwd: user space probe in ubuntu 14.04

2015-09-15 Thread Colin Watson
On Tue, Sep 15, 2015 at 10:52:57PM +0800, Gareth wrote: > I'm systemtap users on ubuntu. Here is an issue about mysql dbgsym > package. Below are some details > > ps: > > http://paste.openstack.org/show/462299/ some bash history > http://paste.openstack.org/show/462471/ the packages I have instal

Re: Getting ubuntu iso securely

2015-09-15 Thread Ryein Goddard
You could add multiple sources that store an encrypted checksum and then reference that with an Ubuntu branded downloader. That program would be pretty easy to make and it would abstract away all requirements for anything time consuming from the user. On Tue, Sep 15, 2015 at 3:53 AM, Ralf Mardorf

Re: Getting ubuntu iso securely

2015-09-15 Thread J Fernyhough
And how would you know the Ubuntu-branded downloader is secure? I think you're over-complicating things here. Anyone interested in verifying a download is correct can verify the posted SHAsum, and anyone really concerned could install from a netboot (mini.iso), check its seed file, and download al

Re: Getting ubuntu iso securely

2015-09-15 Thread Ryein Goddard
That part is easy because it could be a open script with probably less then 10 lines of code. On Tue, Sep 15, 2015 at 12:23 PM, J Fernyhough wrote: > And how would you know the Ubuntu-branded downloader is secure? > > I think you're over-complicating things here. Anyone interested in > verifying

Re: Getting ubuntu iso securely

2015-09-15 Thread J Fernyhough
An "open" script with an encrypted checksum? What's to stop someone compromising this script during transport? You have recreated *exactly* the same problem, just a level higher. On 15 September 2015 at 20:27, Ryein Goddard wrote: > That part is easy because it could be a open script with probab

Re: Getting ubuntu iso securely

2015-09-15 Thread Ryein Goddard
We are talking about a more secure method with a built in way to checksum that is easy for users not the Pentagon. On Tue, Sep 15, 2015 at 12:30 PM, J Fernyhough wrote: > An "open" script with an encrypted checksum? What's to stop someone > compromising this script during transport? You have rec

Re: Getting ubuntu iso securely

2015-09-15 Thread J Fernyhough
It's no more secure than running: sha256sum -c ubuntu-installer.iso.shasum or just: sha256sum ubuntu-installer.iso and manually checking the values match. I'd even argue a script is less secure, as the user is running an arbitrary script they've downloaded. It's also no more straightforward as

Re: Getting ubuntu iso securely

2015-09-15 Thread Ryein Goddard
If we are trying to target newbies that don't know what a sha256sum is then I highly doubt they will be running Ubuntu in order to run that command. Personally when I make an ubuntu ISO my CD burner program checks the value for me..so it isn't an issue for me. I am also not worried that it has be

Re: Getting ubuntu iso securely

2015-09-15 Thread J Fernyhough
OK - now you've lost me. Earlier in the thread you were talking about PGP keys and web-of-trust, not about verifying the integrity of a downloaded file. You also mentioned a 10-line script to use as a downloader. Whoever is downloading the file has to use some operating system to do so, whether *

Re: Getting ubuntu iso securely

2015-09-15 Thread Ryein Goddard
Oh that wasn't me. Having a downloader that actually checks to make sure it downloaded properly and has the correct sum is going to be more secure then not checking at all. In the off chance the script/ "program" is hacked a long with the ubuntu ISO all hope is lost, but that is two attack vector

Re: Fwd: user space probe in ubuntu 14.04

2015-09-15 Thread Gareth
I'm not good at these really. Can I provide more information to help for tracing my problem? Btw, I could find the file /usr/lib/debug/.build-id/7c/5b991d6ba0d7722a41f9a39e2915f6a354a1c7.debug in my system. How could I check whether it works with installed mysqld? On Wed, Sep 16, 2015 at 4:06 AM,

Re: Fwd: user space probe in ubuntu 14.04

2015-09-15 Thread Frank Ch. Eigler
Hi, Colin - > This is a mistaken analysis. /usr/sbin/mysqld is in > mysql-server-core-5.5, not mysql-server-5.5, and therefore its debugging > symbols are in mysql-server-core-5.5-dbgsym: Thank you for the correction. I must have misread the output from "dpkg -S". > $ dpkg -c mysql-server-